Turn off XML-RPC
Disable XML-RPC Only
Helps withReduce abuse, scans, and unwanted access
Disables WordPress XML-RPC without adding broader security or cleanup changes.
Plugin category
12 Marketingbende WordPress plugins for Less spam and abuse. Free plugin, small fee for more functionality.
Less spam and abuse
Disable XML-RPC Only
Helps withReduce abuse, scans, and unwanted access
Disables WordPress XML-RPC without adding broader security or cleanup changes.
Disable REST API User Endpoints
Helps withReduce abuse, scans, and unwanted access
Hides and blocks `/wp/v2/users` REST API endpoints for users who cannot list users.
Disable Application Passwords
Helps withReduce abuse, scans, and unwanted access
Turns off WordPress application passwords.
Remove WordPress Generator
Helps withClean up SEO noise
Removes the WordPress generator meta tag and generator output.
Disable File Editor
Helps withSolve one small WordPress annoyance
Disables the built-in plugin and theme file editors in wp-admin.
Disable File Modifications
Helps withSolve one small WordPress annoyance
Disables plugin/theme installs, updates, and file edits from wp-admin.
Disable Login Error Hints
Helps withMake the login page calmer
Replaces detailed WordPress login errors with a generic message.
Block Author Enumeration
Helps withSolve one small WordPress annoyance
Redirects public ?author= requests to prevent basic username enumeration.
Disable XML-RPC Pingbacks
Helps withCalm down comments and spam
Disables XML-RPC pingback methods while leaving other XML-RPC methods available.
Disable REST API for Visitors
Helps withReduce abuse, scans, and unwanted access
Blocks REST API requests from logged-out visitors.
Disable XML-RPC Authentication
Helps withReduce abuse, scans, and unwanted access
Blocks username and password authentication attempts made through WordPress XML-RPC.
Remove X-Pingback Header
Helps withCalm down comments and spam
Removes the X-Pingback HTTP header from WordPress front-end responses.